TinyBacklog/relapse-exploit-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow Spectrum Library DNS endpoints

Browse Source
This commit is contained in:
kadinho
2026-10-07 22:17:52 +01:00
parent 7df4a40c78
commit d1e39243a6
5 changed files with 49 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+15 -8
View File
@@ -34,21 +34,28 @@ The maintained LAN deployment runs on `net-utils01` from
Configure the PS5 with primary DNS `192.168.20.30` and secondary DNS `0.0.0.0`.
The DNS gateway resolves `manuals.playstation.net` locally and forwards only
`homebrew.page`, `itsplk.github.io`, `github.com`, and
`release-assets.githubusercontent.com` to its configured upstream resolver. These
names cover the homebrew store and the official PS5 Payload Manager catalog and
downloads; every other name receives NXDOMAIN.
`homebrew.page`, `itsplk.github.io`, `store.spectrumlibrary.online`,
`api.github.com`, `github.com`, and `release-assets.githubusercontent.com` to its
configured upstream resolver. These names cover the homebrew store, the official
PS5 Payload Manager catalog and downloads, and Spectrum Library's fixed API and
update endpoints; every other name receives NXDOMAIN.
The console needs LAN access to DNS UDP/TCP 53 and TCP 80, 443, and 8000 on
`192.168.20.30`. For the homebrew store and Payload Manager it also needs WAN egress
on TCP 443 to the four allowlisted domains; no WAN ingress rule is required. The
server needs DNS egress on UDP/TCP 53 to its configured resolver (`1.1.1.1` by
default).
`192.168.20.30`. For the online applications it also needs WAN egress on TCP 443 to
the six allowlisted domains; no WAN ingress rule is required. The server needs DNS
egress on UDP/TCP 53 to its configured resolver (`1.1.1.1` by default).
The Payload Manager supports arbitrary custom repository URLs. Those hosts are not
allowed automatically: review the repository JSON, payload URLs, checksums, and
redirect destinations before adding another exact hostname to `FORWARDED_DOMAINS`.
Spectrum Library is distributed without source code in its repository. Static
review of its 1.4.8 ELF identified `store.spectrumlibrary.online` for its API and
`api.github.com` for update checks. Catalog responses can supply additional cover,
manifest, and package URLs; these unknown hosts remain blocked until observed and
reviewed. The Spectrum API returned HTTP 502 during the 2026-10-07 review, so DNS
availability alone does not guarantee that its catalog will load.
To deploy a reviewed commit:
```sh